Entities using the name and iconography of Anonymous (EUTNAIOA) claim to have leaked server disk images extracted from Epik – the controversial US outfit that has provided services to far-right orgs such as the Oath Keepers and Gab, provided a home to social-network-for-internet-outcasts Parler, and hosted hate-hole 8chan.

Epik made a virtue of providing such services. In a [1]blog post defending its decision to operate Gab’s domain name after GoDaddy declined to do so, Epik CEO Rob Monster argued it was a free speech issue, and said deplatforming companies is both censorship and a violation of inalienable rights.

EUTNAIOA earlier [2]leaked 180GB of data it said it siphoned from Epik servers, plenty of it detailing the activities of far-right groups such as The Proud Boys and the ridiculous QAnon mob. This included personally identifiable information, domain ownership records, account credentials and SSH keys, internal Git repos, payment histories, and more.

[3]

The hacktivist collective justified the release of stolen data on the grounds it exposed racists, and dubbed the operation: Epik Fail.

[4]Remember Anonymous? It/they might be back, and it/they are angry with Elon Musk

[5]Sorry script kiddies, hacktivism isn't cool anymore: No one cares about stuff that's easy-peasy to defend against

[6]Anonymous floods Thai gov websites to protest backpacker murder case

That document dump was shared around the internet and was widely assessed as authentic. At least one Epik customer identified in the leaked files – a Florida estate agent – was [7]fired as a result of the leak; it emerged he had tried to register domains such as theholocaustisfake.com via the web biz.

This latest super-dump of stolen Epik data was first [8]reported by the Daily Dot on Wednesday after EUTNAIOA shared the information as a torrent.

[9]

[10]

One of the publication's reporters tweeted a partial screen shot of the collective's announcement of the leak, and detailed some of its contents:

BREAKING: The hacking collective Anonymous has announced another data leak from the web hosting company Epik.

Data includes full disk images of Epik's server infrastructure & exposes at least 59 API keys for Twitter, Coinbase, PayPal, & more.

Story here: [11]https://t.co/nLOAE6medZ [12]pic.twitter.com/GP1TSP0TtW — Mikael Thalen (@MikaelThalen) [13]September 29, 2021

We're told the dump is a 70GB archive that includes “several bootable disk images of assorted systems” that represent Epik's server infrastructure. Journalist Steve Monacelli, who broke the news of the first data release, [14]said the latest leak is effectively 300GB in size.

"This leak appears to be fully bootable disk images of Epik servers, including a wide range of passwords and API tokens," he added.

And that’s all that’s made it into public view at this time, it appears.

[15]

The Distributed Denial of Secrets collective, which is separate to EUTNAIOA and helped spread the initial leak, said those who ransacked Epik's systems had claimed to have obtained “bootable disk images.”

After the first release of data, Epik's Monster CEO conducted a video chat session in which he claimed the data was likely sourced from a backup that was “intercepted,” but didn’t elaborate.

Whatever the data dump contains, and however it was obtained, interest in the data trove is enormous because it is felt to offer extraordinary insights into how far-right groups operate.

[16]

And as FBI director Christopher Wray said in a March [17]statement to the United States' Senate Judiciary Committee, the Feds consider the top threat the nation faces from domestic violent extremists to be “those we identify as racially or ethnically motivated violent extremists, specifically those who advocate for the superiority of the white race.”

Epik happily hosts services and individuals who hold those views. ®

Get our [18]Tech Resources



[1] https://www.epik.com/blog/why-epik-welcomed-gab-com.html

[2] https://www.theregister.com/2021/09/28/in_brief_security/

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YVU2jbg001OpQYpKI0BZLgAAAM8&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[4] https://www.theregister.com/2021/06/07/anonymous_musk/

[5] https://www.theregister.com/2019/08/21/hacktivism_in_decline_recorded_future/

[6] https://www.theregister.com/2016/01/13/anonymous_crapfloods_thai_govt/

[7] https://therealdeal.com/miami/2021/09/27/south-florida-real-estate-agent-named-in-hack-of-far-right-web-hosting-company/

[8] https://www.msn.com/en-us/money/technologyinvesting/new-leak-of-epik-data-exposes-companys-entire-server/ar-AAOYbIg?ocid=st

[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YVU2jbg001OpQYpKI0BZLgAAAM8&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YVU2jbg001OpQYpKI0BZLgAAAM8&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[11] https://t.co/nLOAE6medZ

[12] https://t.co/GP1TSP0TtW

[13] https://twitter.com/MikaelThalen/status/1443303462054236160?ref_src=twsrc%5Etfw

[14] https://twitter.com/stevanzetti/status/1443299000187297795

[15] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YVU2jbg001OpQYpKI0BZLgAAAM8&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[16] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YVU2jbg001OpQYpKI0BZLgAAAM8&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[17] https://www.fbi.gov/news/testimony/oversight-of-the-federal-bureau-of-investigation-the-january-6-insurrection-domestic-terrorism-and-other-threats

[18] https://whitepapers.theregister.com/